getsentry sentry-javascript
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114139 | >= 9.36.0, < 9.47.2 ; >= 10.0.0-alpha.0, < 10.75.2 ; >= 11.0.0-alpha.0, < 11.0.0-rc.1 | Sentry-Javascript: Middleware Bypass when using Tunnel route | CRITICAL 9.1 | 0.5 % | ||
| CVE-2025-65944 | >= 10.11.0, < 10.27.0 | Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` | MEDIUM 5.1 | 0.4 % | ||
| CVE-2023-50249 | >= 7.78.0, < 7.87.0 | Sentry's Astro SDK vulnerable to ReDoS | HIGH 7.5 | 0.8 % | ||
| CVE-2023-46729 | >= 7.26.0, < 7.77.0 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint | CRITICAL 9.3 | 0.6 % |